Update our telemetry statement

Author: aeisenberg

.github/TELEMETRY.md

@@ -1,22 +1,31 @@
 # Telemetry in the CodeQL extension for VS Code
 
+If you specifically opt-in to permit GitHub to do so, GitHub will collect usage data and metrics for the purposes of helping the core developers to improve the CodeQL extension for VS Code. This data will not be shared with any parties outside of GitHub and will be retained for a maximum of 30 days.
+
 ## Why do you collect data?
 
 GitHub collects usage data and metrics to help us improve CodeQL for VS Code.
 
 ## What data is collected
 
-GitHub collects anonymous information related to the usage of the extensions. The data collected are:
+GitHub collects anonymized information related to the usage of the extensions. The data collected are:
 
 - Which commands are run.
 - The time taken for each command.
-- Anonymized stack trace and error message of any errors that are thrown from inside the extension.
 - Anonymous GUID to uniquely identify an installation.
-- IP address of the client sending the telemetry data. This IP address is not stored. It is discarded immediately after the telemetry data is received.
+- IP address of the client sending the telemetry data.
+
+## How long will data be retained?
+
+Data will be retained for a maximum of 30 days.
+
+## Who will have access to this data?
+
+IP address and GUIDs will be available to the core developers of CodeQL. Aggregated data will be available to GitHub employees.
 
 ## What data is **NOT** collected?
 
-We are careful to only collect the minimal amount of data we need to answer the questions about how our users are experiencing this product. So this means that we do not collect the following information:
+We only collect the minimal amount of data we need to answer the questions about how our users are experiencing this product. To that end, we do not collect the following information:
 
 - No GitHub user ID
 - No CodeQL database names
@@ -28,3 +37,7 @@ We are careful to only collect the minimal amount of data we need to answer the
 You can disable telemetry reporting by setting `codeQL.telemetry.enableTelemetry` to `false` in [your settings](https://code.visualstudio.com/docs/getstarted/settings#_settings-editor).
 
 Additionally, telemetry will be disabled if the global `telemetry.enableTelemetry` setting is set to `false`. For more information on global telemetry collection, see [Microsoft’s documentation](https://code.visualstudio.com/docs/supporting/faq#_how-to-disable-telemetry-reporting).
+
+## More information
+
+See GitHub's [Privacy Statement](https://docs.github.com/en/free-pro-team@latest/github/site-policy/github-privacy-statement) and [Terms of Service](https://docs.github.com/en/free-pro-team@latest/github/site-policy/github-terms-of-service) for more information.

extensions/ql-vscode/README.md

@@ -110,3 +110,7 @@ For more information about the CodeQL extension, [see the documentation](https:/
 ## License
 
 The CodeQL extension for Visual Studio Code is [licensed](LICENSE.md) under the MIT License. The version of CodeQL used by the CodeQL extension is subject to the [GitHub CodeQL Terms & Conditions](https://v-securitylab-github-com.jerryabc.cn/tools/codeql/license).
+
+## Data and Telemetry
+
+If you specifically opt-in to permit GitHub to do so, GitHub will collect usage data and metrics for the purposes of helping the core developers to improve the CodeQL extension for VS Code. This data will not be shared with any parties outside of GitHub and will be retained for a maximum of 30 days. Please see [telemetry](TELEMENTRY.md) for more information.